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1. Introduction 

Loops as algebraic structures had been an important object of study in mathematics 
starting from the first half of the 20th century with the works of Baer j!3j, Albert ID E| 
and Bruck [3]. It has always been practice to study right loops through its right inner 
mappings and inner mapping groups (also called group torsions [6]). The notion of 
general extension and the notion of general extension associated to a right loop has 
been given [6j. Indeed, it is observed that every right loop S can be embedded into 
a group as right transversal with some universal property[6]. The smallest subgroup 
generated by S is the group Gs x S, the general extension associated to S. The notion 
of encryption and decryption has been introduced for a given right loop [ID] by using 
bracket arrangement of weight n. 

Diffie-Hcllman scheme [7] is a key exchange system for establishing a common key 
between A and B. Their key exchange protocol is based on Cyclic groups. In 2010, M. 
Habeeb, D. Kahrobae, C. Koupparie and V. Spilrain introduced a new concept of key 
exchange protocol using semi-direct product of (semi) groups and then focused on prac¬ 
tical instances of this general idea |5]. Their concept motivates us to give key exchange 
protocol based on a right transversal to a subgroup of the given group (general exten¬ 
sions) and general extensions associated to right loops. We also discuss key exchange 
protocol in the case of right gyrogroupsjS] and twisted right gyrogroupsp?]. 

2. C-GROUPOIDS AND GENERAL EXTENSIONS 

A group G is called a general extension of a group HAH can be treated as a subgroup 
of G. Let H be a subgroup of group G. A right transversal to H in G is a subset S 
of G obtained by selecting one and only one member from each right coset of G mod 
H including identity e of group G. It is observed that each right transversal S' to a 
subgroup H in a group G determines an algebraic structure (S, H , a, f) [6] in the sense 
of following: 

Definition 2.1. A quadruple (S, H,a, f), where S is a groupoid with identity e, H a 
group which acts on S from right through a given action 9, a a map from S to H H (the 
set of all maps from H to H) and f a map from S x S to H, is called a c-groupoid if 
it satisfies the following conditions: 

(1) x o y = y => x = e, 

(2) For each x G S, 3x' G S such that x' o x = e, 
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(3) a e = Ih, the identity map on H, where a x denotes the image of x under the 
map a, 

(4) f(x,e) = f(e,x) = 1, the identity of H, 

( 5 ) a x (hih 2 ) = cr x (hi)cr x g hl (h 2 ) } 

(6) (xoy)oz = x9f(y,z)o(yoz), 

(7) {xoy)6h = x6a y {h)o(y6h), 

(8) f(x,y)f(xoy,z) = cr x (f(y,z))f{x9f(y,z),yo z), 

(9) f(x,y)a xoy (h ) = a x (a y (h))f(x9a y (h),y9h). 

where x,y, z e S and hi, hi, h e H. 

Conversely, we have 

Theorem 2.2. (^[6], Theorem 2.2) Given a c-groupoid ( S,H,a,f ) there is a group G 
which contains H as a subgroup and S as a right transversal of H in G such that the 
corresponding c-groupoid is (S, H, a , /). 

The corresponding group G is H x S together with a binary operation . given by : 

(2.1) (a, x) ■ (b, y) = (aa x (b)f(x9b,y),(x9b)oy). 

This group is termed as general extension of a group H by a set S satisfying above 
properties (or a general extension associated to a c-groupoid). 

Let (S, H , a, /) be a c-groupoid. Let x G S and a G H. Define f3 n (x, a) inductively 
by the following: 

(d l (x, a) = x, fd 2 (x, a) = x9a o x. 

If f3 r (x,a ) is defined then 

(2.2) /3 r+1 (x, a) = /3 r (x, a)9a o x. 

Similarly, we define g n (x, a)inductively by the following: 

g l (x,a ) = a, g 2 (x,a) = aa x (a)f(x9a,x). 

If g n (x,a ) is defined, then 

(2.3) g n+1 (x, a) = g n [x, a)a^^ ta) (a)f(f3 n (x, a)9a, x) 

Using Eqs. [2TUIZ21 [2731 we have 

(2.4) ( a,x) n = ( g n (x,a),(3 n (x,a )) 

for each n e N. 

Since 

(a, x) n .(a, x) m = ( a,x) m+n = (a,x) m .(a,x) n 
Using Eqns. 12.41 and 12.11 we have the following: 

Lemma 2.3. Let (S, H, a, f ) be a c-groupoid and x G S\ {e}, h G H \ {1}. Then 
(1) 

g n+m (x, a) = g n (x, a)apn {Xia) (g m (x, a))f(/3 n (x, a)9g m (x, a),/3 m (x, a)) 

= 9 m (x, a)crgm^ a) (g n (x, a))f(f3 m (x, a)9g n (x, a),f3 n (x, a)) 

(2) /3 m (x, a)0g n (x, a)o/3 n (x, a) = /3 n (x,a)9g rn (x,a)of3 rn (x,a) = / 3 m+n (x,a ). 

Next, for i 6 S', a G H , we define [ aa x (a)\ m inductively by : 

[ncr 3 ,(n)]o a, [nn" 3 .^n)j^ ciu x (u) and [ncr 3 .^(i)] ri a(T x (fa(j x (a^ n —.i). 

Then, we have the following: 
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Lemma 2.4. Let (S, H, a, f ) be a c-groupoid and x G S \ {e}, h G H\ {1}. For m > 2, 
/ 3 m (x,a ) is given by 

(2.5) ((... (x 6 [aa x (a )] m _2 o x9[acr x (a)\ m _ 3 ) o...) o x9[aa x (a)] 0 ) ox 


Proof: For m > 2, 


r(x,a) 


{/3 m—1 (x, o)#a}o:r 
{({/3 m_2 (.T, a)6 , a}ox)6 ) a}oa: 

(/3 m_2 (ai, a)#(aa x (a))ox#a)oa; 

(/3 m ~ 2 (x, a)9[aa x (a)\i o x9[acr x (a)]o) ox 
(((/3 m ^ 3 (x, a)#a o x) 0 [acr x (a)]i) o a;0[acr x (a)]o) o x 
((/3 rn ~ 3 (x,a)9(aa x ([aa x (a)}i)) o x9[aa x (a)\i) o x9[aa x (a)] 0 )ox 
((j3 m ~ 3 (x, a) 0 ([acr x (a)] 2 ) o x9[aa x (a)\i) o x9[a(j x (a)\Q)ox 


= [[... \^(x, a)9([aa x (a)] m _ 2 ) o x9[aa x (a)\ m _ 3 \ o ...] o x9[acr x (a)\ 0 ] o x 
= [[... [x9([aa x (a)}m - 2 ) o x9[aa x (a )] m _ 3 ] o ...] o x9[aa x (a)] 0 ] o x 


□ 


Corollary 2.5. If <J X = Ih, then [aa x (a)] m = a m+1 and so 

(2.6) /3 m (x, a) = ((... ( x9a m ~ 1 o x9a m ~ 2 ) o ...) o x9a) ox. 


Corollary 2.6. If a x (h) = rj(h) for all x E S \ {e} and h 6 H, where 77 e Aut H is an 
involution. Then 


\aCT x (o)]m 


a[?y(a)a] 2 if m is even 
[ 077 (a)] if m is odd 


Thus 

r(x,a) 


(x9[a(r](a)a) m 2 ] o x9[ar](a)} 2 ) o...) o x9a) ox 


(x9[a‘Ti(a )} m ^ 1 o £#[ 0 ( 077 ( 0 )"* 2 3 ) o ...) o x9a) ox 


if m is even 

if m is odd. 


3. Key exchange protocol using right transversals 

Let S' be a right transversal to a subgroup H in a group G. Clearly each g e G can 
be uniquely expressed as g = hx for h e H and x G S. For the sake of convenience, we 
shall call h as subgroup component of g and x as representative of g. Let x G S \ {e} 
and a G H \ {1}. Keeping x and a as public, Alice chooses her private key m G N and 
Bob chooses his private key n e N. Both are agree to work with the cyclic subgroup 
{(aa;) r = g r (x,a)(3 r (x,a); \ r e N} U {le}. I 11 this case the key exchange protocol is 
given by: 

( 1 ) Alice computes ( ax) m = g m (x, a)/3 m (x, a) and sends only its representative 
/ 3 m (x,a ) (given by 12.41) to the Bob. 

(2) Bob computes ( ax) n = g n (x, a)/3 n (x, a) and sends only its representative (3 n (x , a) 
(given by I2.4[) to the Alice. 
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(3) Alice computes (0/3 n (x, a)).(g m (x, a)(3 m (x, a)) which is equal to 

a)9g m (x, a),/3 m (x, a))) [/3 n (x, a)9g m (x , a) o /3 m (x, a)} 

and her key K a = f3 n (x,a)9g m (x,a) o /3 m (x,a) = /3 m+n (x,a). Note that Alice 
is not able to compute subgroup component because she does not know the 
subgroup component 4> — 9 n { x , a )- Thus, she computes only the representative. 

(4) Bob computes (^/3 m (x,a)).(g n (x,a)/3 n (x,a)) which is equal to 

m (x,a)(g n (x, a))f(/3 m (x, a)9g n (x, a),/3 n (x, a)))[ld m (x, a)9g n (x , a) o /3 m (x , a)] 

and his key K Pj = (3 m (x,a)9g n (x,a) o f3 n (x,a) = / 3 n+m (x,a ). Note that Bob 
is not able to compute subgroup component because he does not know 0 = 
g m (x,a). Thus, he computes only the representative. 

(5) In the general extension G = H x S determined by a c-groupoid (S', H , a, /), 

(0,/T).(0,/r) = (0,/r).(0,/T) = (a,x) n+m . 

Thus the shared common key is I\ = K A = Kb- 

4. Right loops and Key exchange protocol 

A non empty set S together with binary operations o is called a right loop if for each 
x,y G S, the equation Xox = y has a unique solution in S. The identity element of S 
is denoted by e. 

Let (S', o ) be a right loop with identity e and y , z in S. The map f(y , z) from S' to S' 
given by the equation 

(4.1) f(y,z)(x)o(yoz ) = (xoy)oz, xeS 

belongs to Sym S (the Symmetric group on S ) and is called a right inner mapping of 
(S', o ). Indeed f(y , z) G Sym{S \ {e}) C Sym S. The subgroup G s of Sym(S \ {e}) C 
Sym S generated by {f(y, z) \y,z G S'} is called the right inner mapping group (also 
called the group torsion 0) of (S, o ). 

Further, let h G Sym(S \ {e}) C Sym S and y G S. Define a y (h ) G Sym{S \ {e}) C 
Sym S by the equation 

(4.2) h(xoy) = <J y (h)(x)oh(y), x G S 

For the sake of convenience we shall also write x9h for h(x). Thus the equations (14.ip 
and f!4.2p also read as 

(4.3) x9f(y,z)(x)o(yoz) = ( xoy)oz , x G S 

and 

(4.4) ( xoy)9h = x9a y (h)oy9h 
respectively. 

Proposition 4.1. Let (S', o) be a right loop with identity e. Then it determines a c- 
groupoid (S', G s ,cr,f) |6]. 

The group Gs x S' determined by c-groupoid (S', Gs , cp /) is the smallest group gener¬ 
ated by S', which is known as the general extension associated to the right loop S. Since 
all the results described as above hold in the general extension Gs x S', therefore Bob 
and Alice may agree to work with the given right loop. Their key exchange protocol is 
described by the following: 

Let S' be a right loop and x G S \ {e} and a G Gs \ {Ls}. Keeping x and a as public, 
Alice chooses her private key m G N and Bob chooses his private key n G N. Both are 
agree to work with the cyclic subgroup {(a, x) r = (g r (x, a), /3 r (x , a)); | r G N}U{(/s, e)}. 
In this case the key exchange protocol is given by: 
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(1) Alice computes (a, x) m = ( g m (x , a), (3 m (x, a)) and sends only the second compo¬ 
nent /3 m (x, a) to the Bob. 

(2) Bob computes (a, x) n = ( g n (x , a), /3 n (x, a)) and sends only the second component 
/ 3 n (x , a) to the Alice. 

(3) Alice computes /3 n (x, a)9g m (x, a) o f3 m (x,a)). Her key is now 

I\a = /3 n (x, a)9g m {x, a) o /3 m (x, a). 

(4) Bob computes (3 m (x, a)9g n (x, a) o f3 m (x, a). His key is now 

Kb = f3 m (x, a)9g n (x, a) o f3 n (x, a). 

(5) Using Lemma [2.31 the shared common key K = Ka = Kb- 
Using Lemma (12.51) . we have: 

Corollary 4.2. If ( S,o ) is a right gyrogroup^ j, then the shared common key will be 
f3 m+n (x, a), where j3 m {x , a) = [(... ((x#a m_1 o x9a m ~ 2 )ox9a m ~ 3 ).. .)ox9a]ox for m G N. 

Corollary 4.3. If (S, o ) is a twisted right gyrogroup [H], then cr x for every x G S \ {e}, 
is a fixed involutory automorphism of Gs say 7] . In this case the shared common key 
will be /3 n+m (x,a), where f3 n (x,a ) is given by Corollary QOl 

Example 4.4. Let S = {e, xi, x 2 , ..., Xi 5 }. Define a binary operation o on S by 
taking e as the identity and defining x t o Xj = x t if i j and x % o x t = e. Then (S, o ) 
is a right loop with x' — x and fix', x) = Is for all x e S. Also, for i j 

{ Xu for i,j k 
Xj for k — i 
Xi for k — j 

This shows that the group torsion Gs = Sym (^{e}). It is also evident that f(xi, Xj) e 
Aut (S,o). Thus, Aut ( S,o ) = Gs and so (S,o) is a right gyrogroup [| 8 j. Take x = x 3 
and a = ( x 3 x 4 X\ x 9 x$ x 7 ). Then 


(3 1 (x,a) = x g 1 (x,a) = a 

(3 2 (x,a) = X 4 OX 3 = x 4 g 2 (x,a) = a 2 (x 3 xf) = (x 3 X\ x 8 x 4 x 9 

/5 3 (x, a) = XgOX 3 = Xg 

g 3 (x,a ) = (x 3 X\ X S x 4 Xg X 7 ) a (x 4 X 3 ) = (x 4 X 7 X 4 X 8 X 3 Xg) 

Alice chooses her private number 2 and sends f3 2 (x,a) = x 4 to Bob. Bob chooses his 
private number 3 and sends f3 3 (x,a ) = x 4 . Now, Alice computes 

Xi 9g 2 (x, 0 ) 0 x 4 = %i9(x 3 x 4 x 8 x 4 x 9 x 7 )ox 4 = x 8 

and Bob computes 

x 4 9g 3 (x, a)ox 1 = x 4 9(x\ x 7 x 4 x 8 x 3 x 9 )ox 4 = x 8 ox 4 = x 8 . 

Thus their shared common key is x 8 . 
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